Link to home
Start Free TrialLog in
Avatar of Pkafkas
Pkafkas

asked on

You have not chosen to trust go daddy secure certificate authority-G2, when connecting from a MAC

Hello:

We have installed a new Citrix Farm and we are almost ready to begin testing that new Citrix farm with some of our company employees/users.  Hence, we have 2 Citrix farms working side-by-side and both are independent of each other(using different virtual servers and different netscaler web addresses).  We are using the older Citrix Setup for production until we have properly tested the new Citrix setup.

My questions are:

1.  Why do I get a Citrix Receiver error "You have not chosen to trust go daddy secure certificate authority-G2, the issuer of the server's security certificate."  when I try to launch an application from the new Netscaler external web address, while using my Apple MacBook Air?
          a.  The 2 browsers that I have tried are Safari or Chrome?
          b.  Both browsers get the same pop-up message error.
          c.  The new netscaler address is https://test.company.org .

If I use the same external netscaler address (for the new Citrix Setup) on a Windows PC there are no problems.  I have used Internet Explorer, Google Chrome and Mozilla Firefox without any problems.  I think there must be a setting that should be set in Safari, on my MacBook Air.

My MAC does work just fine when I use a separate netscaler address that we have setup when we are inside the company network.  That web address is https://storefront.company.org.  Perhaps a setting must be set in the safari security settings for the external netscaler web address (https://test.company.org).

Equally important, everyone that is using a Mac or any device) from our company is using the production web address just fine (https://portal.company.org).  That same web address works just fine on my MacBook Air.  The problem is with the new external netscaler Web access.  I can authenticate just fine; but, I cannot trigger the Citrix Receiver to work correctly with the external web address on my Mac.

Any ideas?
Avatar of Pkafkas
Pkafkas

ASKER

I did find this article; but, I do not beleive that is the answer:  

https://www.experts-exchange.com/questions/28333011/Installing-and-SSL-Cert-on-Citrix-Xen-App-Server.html

I have not tried the above suggestion yet.
SOLUTION
Avatar of Dirk Kotte
Dirk Kotte
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pkafkas

ASKER

How do I do as you suggest?

1.  Doublecheck you have uploaded and linked the full certificate chain at the NetScaler.


2.  How may I install this CA and sub-CA certificates at the MAC workstation?


3.  Please disregarding my above comment, that is not the not correct web link, that I wanted to reference.
       a.  The web link that I wanted to reference is:  https://discussions.apple.com/thread/3853617?start=0&tstart=0

Any thoughts?
Avatar of Pkafkas

ASKER

I have tried 3 different Apple Laptops and they all get the same error message when trying to access the external Netscaler Citrix Portal.  

The problem does not appear to be exclusively my my MAC laptop.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pkafkas

ASKER

Thank you for your efforts the Citrix Consultant logged on and made some changes on the Licensing server.  I am not sure what he did exactly.
I tried your notes and I was not able to see the certs that were needed.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pkafkas

ASKER

I am going to try and find out what the Citrix consultant did to fix the SSL issue and report back to this ticket.
Apple dont always ship the most up to date truated certificates with their software updates, this is something microsoft is very good at. the only choice you have is to install these. here is a list of supported certificates from Apple.

https://support.apple.com/en-us/HT202858
Avatar of Pkafkas

ASKER

I am not sure what the consultant has done to fix the situation.  He did not share it with me.  I will provide points for this case to the experts that have provided feedback.